> The funny thing is they have a "Source code reviewed by Codacy" badge on the readme claiming the code is grade A... but if you actually click through, of course Codacy didn't pick up the .ino file at all, so in fact nothing of substance is being reviewed. That .ino file wouldn't pass any style review... it's a mess.
Meanwhile Nitrokey has actually been audited by Cure53.
Meanwhile Nitrokey has actually been audited by Cure53.